Signalis
sign in--:--:--UTC
CVEs

CVE-2026-35616

exploited in the wild
CVSS
9.8
Reports
11
First seen
Apr 8
Last seen
Jun 16
Affected product

Fortinet FortiClient EMS

Associated actors

ShinyHunters ×2Volt Typhoon ×2APT28 ×1Bitter ×1BITTER APT ×1Contagious Interview ×1DragonForce ×1GHOST STADIUM ×1Glitter Carp ×1idbzoomh ×1Infrastructure Destruction Squad ×1JDY botnet operators ×1Qilin ×1313 Team ×1Scattered Lapsus$ Hunters ×1Sequin Carp ×1Shadow-Earth-053 ×1Silk Typhoon ×1Storm-1175 ×1Storm-2372 ×1

Recent reports

Critical

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

The Hacker NewsHigh

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

The Hacker NewsHigh

China-linked JDY botnet expands targeting of U.S. military networks

Bleeping ComputerHigh

CERT-EU Cyber Brief May 2026 – Espionage, Supply-Chain Attacks, and Ransomware Infrastructure Disruption

CERT-EU Threat IntelHigh

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

The Hacker NewsHigh

Hackers exploit FortiClient EMS flaw to push EKZ infostealer malware

Bleeping ComputerHigh

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

The Hacker NewsHigh

CERT-EU Cyber Brief April 2026 – Espionage, Supply-Chain Attacks, and Critical Infrastructure Threats

CERT-EU Threat IntelHigh

Threat Intelligence Report – 13 April: LAPD Breach, ChipSoft Ransomware, Qilin Campaign, Ivanti Exploitation

Check Point ResearchCritical

FortiClient EMS SQL Injection and Access Control Vulnerabilities (CVE-2026-21643, CVE-2026-35616)

NICS TaiwanHigh

Vulnerability in Fortinet FortiClientEMS (CVE-2026-35616)

GovCERT.HK

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans